home

accesssecuredata.exe

Safend Data Protection Agent

Safend

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘AccessSecureData’.
Publisher:
Safend Ltd.  (signed by Safend)

Product:
Safend Data Protection Agent™

Description:
Safend Data Protection Agent™ Icon

Version:
3.4 (build 5633.11904)

MD5:
76752e519c319d603feaf8b787862bc7

SHA-1:
980d86dd08d63222736e3b8c4221940535e8c2d9

SHA-256:
d31ec076d357bb98c029a9b65cc661cbf9e757a1c66650113e7caff66a5455d7

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 11:54:49 AM UTC  (today)

File size:
2.6 MB (2,682,400 bytes)

Product version:
3.4 (build 5633.11904)

Copyright:
Safend Ltd. All rights reserved.

Original file name:
Simba.exe

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\accesssecuredata.exe

Digital Signature
Signed by:
Safend

Authority:
VeriSign, Inc.

Valid from:
2/3/2010 9:00:00 AM

Valid to:
2/23/2013 8:59:59 AM

Subject:
CN=Safend, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Safend, S=Tel Aviv, C=IL

Issuer:
CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
684AF58E506AEB14144B9F70FD1A79C6

File PE Metadata
Compilation timestamp:
4/3/2012 10:30:51 PM

OS version:
4.0

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
8.0

Entry address:
0x56D60

Entry point:
48, 83, EC, 28, E8, 67, 6F, 00, 00, 48, 83, C4, 28, E9, 0E, FD, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 48, 89, 5C, 24, 08, 48, 89, 74, 24, 10, 57, 48, 83, EC, 30, 4D, 85, C9, 49, 8B, D9, 49, 8B, F0, 48, 8B, FA, 74, 52, 48, 85, C9, 75, 38, E8, 59, 33, 00, 00, 45, 33, C9, 45, 33, C0, 33, D2, 33, C9, 48, C7, 44, 24, 20, 00, 00, 00, 00, C7, 00, 16, 00, 00, 00, E8, 0B, 1D, 00, 00, B8, 16, 00, 00, 00, 48, 8B, 5C, 24, 40, 48, 8B, 74, 24, 48, 48, 83, C4, 30, 5F, C3, 4D, 85, C0, 74, 22, 48...
 
[+]

Entropy:
6.1325

Code size:
1.4 MB (1,482,240 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
AccessSecureData

Command:
C:\users\{user}\appdata\local\temp\{random}.tmp\accesssecuredata.exe


Scan accesssecuredata.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.